rill vulnerabilities

1 known vulnerability in rill from Rill Data. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  rill: Missing Authorization

  CVE-2026-108718Oct 11, 2026Rill Data

  Rill 0.77.0 through 0.90.5 contains a missing authorization vulnerability in the admin OAuth server that issues authorization codes to dynamically registered clients without user consent. Attackers can register a client with the long_lived_access_token scope a